nixos/lemmy: fix nginx backend to proxy needed headers (#306984)

authored by Yt and committed by GitHub d530a7b9 f2ad5d4a

+5 -1
+5 -1
nixos/modules/services/web-apps/lemmy.nix
··· 204 204 }; 205 205 "/" = { 206 206 # mixed frontend and backend requests, based on the request headers 207 - recommendedProxySettings = true; 208 207 extraConfig = '' 209 208 set $proxpass "${ui}"; 210 209 if ($http_accept = "application/activity+json") { ··· 221 220 rewrite ^(.+)/+$ $1 permanent; 222 221 223 222 proxy_pass $proxpass; 223 + # Proxied `Host` header is required to validate ActivityPub HTTP signatures for incoming events. 224 + # The other headers are optional, for the sake of better log data. 225 + proxy_set_header X-Real-IP $remote_addr; 226 + proxy_set_header Host $host; 227 + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 224 228 ''; 225 229 }; 226 230 };